this post was submitted on 22 Jun 2023
209 points (99.5% liked)

Programming

17374 readers
151 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 1 year ago
MODERATORS
 

I've heard people mention curl and imagemagick. Any others that you know about?

you are viewing a single comment's thread
view the rest of the comments
[–] OneDimensionPrinter@lemm.ee 39 points 1 year ago* (last edited 1 year ago) (4 children)

Left pad https://arstechnica.com/information-technology/2016/03/rage-quit-coder-unpublished-17-lines-of-javascript-and-broke-the-internet/

Had GPT summarize what happened.

The "left pad" incident refers to a controversy that arose in 2016 when a developer named Azer Koçulu removed his JavaScript package called "left-pad" from the NPM (Node Package Manager) registry. This caused a ripple effect, breaking numerous projects that relied on this package and highlighting the potential risks of relying on external dependencies. The incident sparked a debate about the stability and trustworthiness of the open-source ecosystem and led to discussions about best practices for managing dependencies in software development.

[–] Torty@beehaw.org 14 points 1 year ago

This is the one I came to post about. The fact there's a library for this is so stupid to me.

I feel like it demonstrates how npm and modules have probably to some degree gotten out of hand.

This famously broke builds at Facebook.

[–] AnonymousLlama@kbin.social 3 points 1 year ago (2 children)

From memory the NPM blokes had to have a think about how they handle important packages because of that. Didn't they revert the changes to left pad to ensure everything else didn't break?

Fascinating to see the house of cards some of these solutions / libraries are built off

[–] JackbyDev@programming.dev 7 points 1 year ago

Yes. They added it back. The policy now is that you can't remove packages that are depended on (or something to that extent, I don't know the specifics).

[–] ottercurling@kbin.social 3 points 1 year ago

Yeah I'm pretty sure Github themselves restored the package if I recall correctly

[–] Spiritreader@kbin.social 3 points 1 year ago

That's always the one I'm thinking of when anyone mentions the xkcd.

npm is one crazy infrastructure.